Unrated severityNVD Advisory· Published Apr 8, 2008· Updated Jun 16, 2026
CVE-2008-1087
CVE-2008-1087
Description
Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote attackers to execute arbitrary code via an EMF image file with crafted filename parameters, aka "GDI Stack Overflow Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
15- cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp1:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows-nt:2008:*:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows-nt:2008:*:x32:*:*:*:*:*
- cpe:2.3:o:microsoft:windows-nt:2008:*:x64:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*
Patches
Vulnerability mechanics
References
11- www.securityfocus.com/bid/28570nvdPatch
- secunia.com/advisories/29704nvdVendor Advisory
- www.securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.us-cert.gov/cas/techalerts/TA08-099A.htmlnvdThird Party AdvisoryUS Government Resource
- marc.infonvdMailing List
- www.osvdb.org/44215nvdBroken Link
- www.vupen.com/english/advisories/2008/1145/referencesnvdBroken Link
- docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-021nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5580nvd
- www.exploit-db.com/exploits/5442nvd
- www.exploit-db.com/exploits/6656nvd
News mentions
0No linked articles in our index yet.